CVE-2023-6944

Summary

CVE-2023-6944: A vulnerability was discovered in the Red Hat Developer Hub's (RHDH) catalog-import function. This issue leads to the leakage of GitLab access tokens on the frontend when the base64 encoded token contains a newline at its end. The sanitized error message, including the raw access token, may be displayed on the frontend. An attacker, upon obtaining the token, could exploit it to push malicious code to repositories, delete resources in Git, revoke or generate new keys, and illegitimately sign code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.